This Privacy Policy ("Policy") describes how k2game ("the Company", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who access or use the k2game website at k2game.org and all associated services, features, games, promotions, and mobile platforms (collectively, "the Platform").
k2game is committed to handling your personal data responsibly and in accordance with applicable data protection laws and the data privacy obligations imposed by our international gaming licence. This Policy is intended to give you a clear, honest, and complete picture of our data practices so that you can make informed decisions about your use of the Platform.
By creating a k2game account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.
For the purposes of applicable data protection law, k2game acts as the data controller in respect of the personal data collected from players and visitors to the Platform. As data controller, k2game determines the purposes and means of processing your personal data and bears responsibility for ensuring that such processing complies with this Policy and with applicable legal requirements.
Where k2game engages third-party service providers to process personal data on its behalf — for example, payment processors, fraud prevention services, or customer support platforms — those third parties act as data processors under k2game's documented instructions and are contractually bound to process data only in accordance with k2game's instructions and applicable law.
Any questions about k2game's role as data controller, requests to exercise your data rights, or concerns about how your personal data is being handled should be directed to k2game's designated data protection contact at [email protected] with the subject line "Data Privacy Request".
k2game collects personal data through several channels: directly from you when you register and use the Platform, automatically through your interaction with the Platform, and in limited circumstances from third-party verification and fraud prevention services. The categories of data we collect are set out below.
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, gender, nationality | Provided by you at registration or KYC |
| Contact Data | Email address, mobile number, residential address (city, province) | Provided by you at registration |
| Financial Data | JazzCash/EasyPaisa account references, HBL/UBL/Meezan Bank account details, transaction history, deposit and withdrawal records | Provided by you during transactions |
| Identity Verification Data | CNIC scan or passport copy, proof of payment method, source-of-funds documentation | Provided by you during KYC |
| Technical Data | IP address, device type, browser type, operating system, screen resolution, session tokens | Collected automatically via Platform |
| Usage Data | Pages visited, games played, betting history, session duration, features used, click paths | Collected automatically via Platform |
| Communications Data | Live chat transcripts, support email correspondence, complaint records | Generated during your interactions with support |
| Responsible Gaming Data | Deposit limits, loss limits, self-exclusion status, cooling-off periods, session reminders | Provided by you via responsible gaming tools |
| Marketing Preferences | Email/SMS opt-in status, promotion opt-out records, communication channel preferences | Provided by you or inferred from behaviour |
k2game does not collect your full payment card numbers or CVV codes (payment card processing, if applicable, is handled entirely by PCI-DSS compliant third-party processors who do not share full card data with k2game). k2game also does not collect biometric data, political opinions, religious beliefs, or health data unless you voluntarily disclose such information in a support communication.
k2game processes your personal data for the following purposes. Each purpose is linked to one or more legal bases described in Section 05 of this Policy.
- Account Registration & Management: To create, maintain, and administer your k2game account, verify your identity, and manage your login credentials and account preferences.
- Transaction Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Crypto USDT, and to maintain accurate financial records of all transactions associated with your account.
- KYC & Regulatory Compliance: To verify your identity and age (21+ requirement), conduct anti-money laundering (AML) checks, satisfy source-of-funds obligations, and comply with all requirements imposed by k2game's international gaming licence.
- Responsible Gaming: To administer deposit limits, loss limits, self-exclusion orders, cooling-off periods, and session reminders, and to monitor for indicators of problem gambling behaviour in order to fulfil our duty of care to players.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and any other prohibited conduct that could harm the Platform or its players.
- Customer Support: To respond to your support requests, investigate complaints, and maintain a record of interactions for quality assurance and dispute resolution purposes.
- Platform Improvement: To analyse usage patterns, game performance, and technical metrics to improve the Platform's functionality, stability, and user experience.
- Marketing & Promotions: To send you information about k2game bonuses, promotions, and new games where you have given your consent or where we have a legitimate interest in communicating with existing players. You may opt out of marketing communications at any time.
- Legal & Regulatory Obligations: To respond to lawful requests from regulatory authorities, law enforcement agencies, and courts, and to retain records as required by our international gaming licence and applicable law.
k2game relies on the following legal bases to process your personal data, depending on the specific purpose of processing:
The majority of data processing by k2game is necessary for the performance of the contract between you and k2game — specifically, the Terms & Conditions you agreed to upon registration. Processing for account management, transaction processing, game provision, and customer support all fall under this basis. Without this processing, k2game cannot provide the Platform services to you.
k2game is legally required under its international gaming licence and applicable AML regulations to conduct KYC verification, maintain financial records, monitor for suspicious transactions, and report certain activities to relevant authorities. Processing conducted for these purposes is mandated by law and cannot be avoided without risking licence revocation.
Where processing is not strictly required by contract or law, k2game may rely on its legitimate interests as an internationally licensed gaming operator. This includes processing for fraud prevention, Platform security, responsible gaming monitoring, and direct marketing to existing players. k2game has conducted legitimate interests assessments for each such processing activity and has determined that its interests are not overridden by your privacy rights in each case.
Where k2game relies on your consent as the legal basis for processing — for example, for optional marketing communications via email or SMS — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, update your communication preferences in your account dashboard or contact support at [email protected].
k2game does not sell your personal data to third parties. However, in order to operate the Platform and comply with legal obligations, k2game shares personal data with carefully selected third parties in the following circumstances:
- Payment Processors: k2game shares necessary financial data with payment processors facilitating JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Crypto USDT transactions. These processors are contractually bound to process data solely for the purpose of completing your requested transaction and implementing applicable fraud prevention measures.
- Identity Verification Providers: To fulfil KYC obligations, k2game may use third-party identity verification services that cross-reference the documents you submit against official data sources. These providers operate under strict data processing agreements and do not retain your data beyond the verification period.
- Fraud Prevention & AML Services: k2game uses specialist third-party services to screen transactions and player profiles against watchlists, politically exposed persons (PEP) databases, and sanctions lists as required by our AML obligations under the gaming licence.
- Customer Support Platforms: k2game's 24/7 live chat and ticketing systems may be operated on third-party infrastructure. Support agents access only the data necessary to resolve your specific query.
- Gaming Software Providers: Certain games available on the Platform are supplied by third-party game developers. These providers may receive limited technical data (such as session tokens and game outcome data) necessary to operate the game. They do not receive your identity or financial data except where required for jackpot verification purposes.
- Regulatory & Law Enforcement Authorities: k2game will disclose personal data to the licensing authority, financial intelligence units, law enforcement agencies, or courts where legally required to do so or where k2game has a good-faith belief that disclosure is necessary to prevent imminent harm, investigate fraud, or comply with a legal process.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of k2game's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer that materially affects the processing of your personal data.
k2game uses cookies and similar tracking technologies on the Platform to enable core functionality, improve performance, and — where you have given your consent — personalise your experience. A cookie is a small data file placed on your device when you visit a website. Cookies cannot execute programmes or deliver viruses to your device.
k2game uses the following categories of cookies:
- Strictly Necessary Cookies: These cookies are essential to operate the Platform. They enable functions such as maintaining your login session, remembering your account preferences, and facilitating secure payment flows. These cookies cannot be disabled without rendering the Platform non-functional.
- Performance & Analytics Cookies: These cookies collect anonymous data about how visitors use the Platform — for example, which pages are visited most frequently, how long sessions last, and where errors occur. This data helps k2game improve the Platform. These cookies do not identify you personally.
- Functional Cookies: These cookies remember choices you have made — such as your preferred language, notification settings, or responsible gaming tool configurations — to provide a more personalised experience on return visits.
- Security Cookies: These cookies help k2game detect and prevent fraudulent activity, multi-account behaviour, and automated bot access to the Platform. They are strictly necessary for the security of the Platform and its players.
You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.
k2game retains personal data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory retention obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Gaming licence AML/KYC obligations |
| Financial Transaction Records | Duration of account + 7 years after closure | International financial record-keeping requirements |
| KYC Documents (CNIC, passport) | Duration of account + 5 years after closure | Gaming licence verification obligations |
| Support Communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Technical & Usage Logs | 13 months from collection | Security monitoring, fraud prevention |
| Marketing Preferences | Until withdrawal of consent or account closure | Consent-based; deleted on opt-out |
| Responsible Gaming Records | Duration of account + 5 years after closure | Gaming licence duty of care obligations |
| Self-Exclusion Records | Minimum 10 years from exclusion date | Gaming licence responsible gaming requirements |
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with k2game's data lifecycle management procedures. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.
k2game implements a comprehensive information security programme to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data in transit between your device and k2game's servers.
- Encryption of sensitive data fields at rest within our databases, including identity document references and financial data.
- Multi-factor authentication requirements for all k2game administrative systems that can access player personal data.
- Role-based access controls ensuring that employees can only access personal data that is necessary for their specific job function (principle of least privilege).
- Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists.
- 24/7 intrusion detection and monitoring systems covering all Platform infrastructure.
- Comprehensive employee data protection training, including specific training on handling Pakistani player data and payment information.
- A documented data breach response procedure that includes notification to affected players and relevant regulatory authorities within required timeframes in the event of a material security incident.
While k2game takes every reasonable precaution to secure your data, no internet-based system can be guaranteed to be 100% secure. You play an important role in keeping your data safe: please use a strong, unique password for your k2game account, enable two-factor authentication where available, and never share your login credentials with anyone.
k2game respects and upholds your rights in relation to your personal data. The following rights are available to all k2game players. To exercise any of these rights, contact k2game's data protection team at [email protected] with the subject line "Data Rights Request", clearly identifying the right you wish to exercise and the specific data concerned.
Request a copy of all personal data k2game holds about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data held in your k2game account.
Request deletion of personal data where it is no longer necessary, or where you withdraw consent and no other legal basis applies.
Request that k2game restrict processing of your data in certain circumstances, for example while a dispute is being investigated.
Receive a copy of data you provided to k2game in a structured, machine-readable format where processing is based on contract or consent.
Object to processing based on legitimate interests, including direct marketing. Marketing objections are actioned immediately on receipt.
k2game will respond to all verified data rights requests within 30 calendar days of receipt. Where a request is complex or involves a high volume of data, this period may be extended by a further 60 days, in which case k2game will notify you of the extension and the reason for it within the initial 30-day period. k2game will not charge a fee for processing data rights requests unless the request is manifestly unfounded or excessive.
Please note that certain rights are subject to exceptions. For example, the right to erasure does not apply to data that k2game is legally required to retain under its gaming licence obligations, AML regulations, or other applicable law. k2game will inform you of any applicable exceptions when responding to your request.
k2game's Platform is strictly intended for adults aged 21 years and above. k2game does not knowingly collect, process, or retain personal data from any individual under the age of 21. This age restriction is applied consistently across all markets in which k2game operates, including Pakistan.
As part of the registration and KYC process, k2game verifies the age of all players using government-issued identity documentation (such as a Pakistani CNIC or passport). Any account found to have been registered by a person under the age of 21 will be immediately suspended, all winnings will be voided in accordance with our Terms & Conditions, and any deposits will be returned to the payment method used, subject to identity verification.
If k2game becomes aware that it has inadvertently collected personal data from a person under the age of 21, that data will be deleted promptly from all k2game systems. Parents or guardians who believe their child may have registered on the Platform should contact k2game immediately at [email protected] with the subject line "Underage Account Report" so that the matter can be investigated and resolved without delay.
k2game operates as an internationally licensed online gaming platform and, in the course of delivering its services, your personal data may be transferred to and processed in countries other than Pakistan. This may occur, for example, when data is processed by our hosting infrastructure, third-party game providers, or fraud prevention services whose servers are located outside Pakistan.
Where personal data is transferred internationally, k2game takes appropriate steps to ensure that your data receives an equivalent level of protection regardless of where it is processed. These steps include:
- Transferring data only to countries or organisations that provide an adequate level of data protection as assessed by k2game's data governance team.
- Implementing contractual safeguards — including standard data protection clauses — with all third-party processors located outside Pakistan who handle your personal data.
- Conducting transfer impact assessments where required to evaluate the risks of specific international transfers and implementing supplementary measures where necessary.
- Ensuring that all international data processors are subject to binding data processing agreements that impose obligations equivalent to those described in this Policy.
If you would like further information about the specific international transfers that apply to your personal data, or to obtain a copy of the safeguards in place, please contact k2game's data protection team at [email protected].
k2game reserves the right to update or modify this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, our business operations, or our data processing practices. All updates will be published on this page with a revised effective date clearly displayed at the top of the Policy.
Where changes are material — meaning they significantly affect how k2game processes your personal data or materially alter your rights — k2game will notify registered players by email to the address associated with their account at least 14 days before the changes take effect. For non-material updates (such as clarifications of existing language or minor administrative corrections), k2game will update the Policy on this page without individual notification.
Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment and acceptance of the revised terms. If you do not agree with any changes to this Policy, you should stop using the Platform and may request account closure by contacting [email protected].
k2game recommends that you review this Privacy Policy periodically to stay informed of how your personal data is being handled. Previous versions of this Policy are available on request from our support team.
If you have any questions, concerns, or requests relating to this Privacy Policy or k2game's handling of your personal data, please reach out to our dedicated data protection team. k2game is committed to addressing all privacy-related enquiries promptly and transparently.